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AMENDMEN TS TO THE CLAIMS 

1 .(currently amended): A system providing a virtual private network service by using an 
IP network including a plurality of routers, wherein 

a rouler> which is «n edge node, router ^commodate accommodate a user of the 
vinual private network service. «*apri** including a r ^ralirvQf virtual router units unit 
corresponding to different users oaohusor of the virtual private network service, and 

each of the vinual router units wm comprising; 

a routing table storing routing information for transferring a packet of a 

corresponding user in TP network, and 

a controller routing un rt controlling a transfer of a packet of a corresponding user 
„; a „t i M « one ofthg plurality ofro uterg in rhe IP network by referencing said routing table. 

2. (original): The system according to claim 1, further comprising 

a setting unit setting up a control channel for transferring the routing information 
between virtual router units belonging to the same vinual private network. 

3. (original): The system according to claim 2, wherein the control channel is an TP 

tunnel. 

4. (original): The system according to claim 1, wherein: 

identification information for identifying a virtual private network corresponding 
to a first virtual router unit arranged within a first router is broadcast from the first virtual router 
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unit to other routers; 

reply information is relumed from a virtual router unit. which belongs to a same 
virtual private network a. a virtual private network identified according to the identification 
information, to the first virtual router unit; and 

the first virtual router unit detects a configuration of a corresponding virtual 

private network based on the reply information- 

5. (original): The system according to claim I , wherein: 

identification information for identifying a virtual private network corresponding 
to a first virtual router unit arranged within a first router is broadcast from the first virtual router 
unit to other routers; 

reply information is returned from a second virtual router unit, which belongs to a 
same virtual private network as a virtual private network identified according to the 
identification information, to the first virtual router unit; and 

a control channel for transferring the routing information is set up between the 
first virtual router unit and the second virtual router unit. 

6. (original): The system according to claim 5, wherein: 

the first virtual router unit has an authentication client unit making a request to 

authenticate the first virtual router unit; and 

the second vinual router unit has an authentication server unit performing 
authentication of the first virtual router unit at the request of the authentication client. 
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7. (original): The system according to claim 2, wherein 

if one of a plurality of virtual router units belonging to a certain virtual private 
network is deleted, a control channel connected to the deleted virtual router unit is removed, and 
a configuration map representing a configuration of the virtual private network is updated in 
remaining virtual router units. 

8. (original): The system according to claim 7, wherein 

the configuration map is updated after a predetermined time period elapses fiom 
when the control channel is removed, 

9. (currently amended): ft router apparatus, wtt<fr jg an edge router, used in a system 
providing TnarmTnmodateauserof a virtual private network service by using an IP network, 
comprising 

a virtual router unit corresponding to each user of the virtual private network 
service, wherein each said virtual router unit includes ee mpri so s 

a routing table storing routing information for transferring a packet of a 
corresponding user in the IP network, and 

a controller routing unit controlling a transfer of a packet of a 
corresponding user via at least on of a pl urality of routers in the IP network by referencing said 
routing table. 
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